Invasion of the message body snatchers! Teams flaw allowed crims to impersonate the boss

Microsoft Teams, one of the world's most widely used collaboration tools, contained serious, now-patched vulnerabilities that could have let attackers impersonate executives, rewrite chat history, and fake notifications or calls – all without users suspecting a thing. Researchers at Check Point this week revealed four flaws in …

[Pussifer]

A Microsoft product with serious vulnerabilities - say it isn't so!

Just in case - /s

[b0llchit]

Read the terms and shiver

Any sane person wouldn't touch teams with a three meter long stick. Everybody should be dropping it when you read the EULA and TOS because it allows microsoft to listen, store and disseminate for "service control and improvement". Unfortunately, nobody really reads this stuff and makes themselves vulnerable and easy targets. Makes you wonder who else can listen in... Oh, and microsoft isn't the only vendor with these problems.

[may_i]

Re: Read the terms and shiver

Many of us don't have a choice. Our employers decide what we will run on our computers.

[Doctor Syntax]

Re: Read the terms and shiver

Employers should certainly have their legal advisers read the T&Cs of anything significant irrespective of the supplier.

OTOH I wouldn't be surprised if their advisers have already signed up without reading the T&Cs.

[b0llchit]

Re: Read the terms and shiver

Actually, you have a choice, at least in the EU.

[Anonymous Coward]

Microsoft Teams...contained serious, now-patched vulnerabilities that could have let attackers impersonate executives, rewrite chat history, and fake notifications or calls – all without users suspecting a thing.

I've been saying this since I first looked at the API. It looks like it's built from cardboard and string. The fact that it's not actually had a massive data breach yet feels like sheer luck.